PERSONAL DATA MANAGEMENT APPARATUS 
AND 

PERSONAL DATA MANAGEMENT METHOD 



5 BACKGROUND OF THE INVENTION 

Field of the Invention 

The present invention relates to a personal data management apparatus that 
manages personal data including addresses, names, phone numbers, etc., and is used for 
10 marketing purposes such as direct mail, phone marketing, or the like. 

This application is based on patent application No. Hei 10-259325 filed in Japan, 
the contents of which are incorporated herein by reference. 

Description of the Related Art 

15 Conventionally, a dealer who needs to send direct mail to many customers or 

needs to carry out marketing activities on the telephone maintains a database containing 
personal data of the customers and uses lists of the personal data retrieved from the 
database for the submission of the direct mail or the telephone calls. However, some 
customers do not wish to receive such direct mail or telephone calls and request the dealer 

20 to delete their personal records from the database. It is also desirable from the point of 
view of privacy protection to support the data entity's (customer's) right to delete his/her 
records. 

Conventionally, when a customer calls the dealer and requests that the customer's 
personal data be deleted from the database, the dealer's receptionist usually responds to 
25 such telephone calls one at a line, searches the database for the record of the customer, and 
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deletes it. Such a way of managing the personal database requires a great deal of labor 
and time, and is therefore inconvenient. 

SUMMARY OF THE INVENTION 

5 

Therefore, an object of the present invention is to provide a personal data 
management apparatus with which personal data can be managed to fulfill the wishes of 
the customers, to which the data corresponds, and save labor and time. 

According to the present invention, the object has been achieved in a personal 

10 data management apparatus, which manages the personal data of multiple individuals 
using a database file containing multiple personal data records corresponding to said 
individuals with identification codes for identification of said personal data records, 
comprising: a database file storage section which is capable of containing the database 
file; a communication control section which transmits and receives signals via a 

15 communication circuit; a guidance message control section which stores multiple 

guidance messages, which makes a selection from the stored multiple guidance messages 
in response to a signal received by the communication control section, and which passes 
the selected message as a signal for transmission to the communication control section; 
and, a data processing section which executes prescribed processes, based on an 

20 identification code received as said signal from the communication control section. 

Such a personal data management apparatus enables an individual, to which the 
personal data corresponds, to perform the desired processes on the personal data 
corresponding to the individual in the database file by ringing up to access to the personal 
data management apparatus of the present invention via a communication circuit, and by 

25 sending an identification code and other information in response to guidance messages 
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which are output selectively. Thus, the processing of the personal data can be done 
automatically in the personal data management apparatus by the manipulation by the 
individual, and this process does not require labors such as that by receptionists to receive 
telephone calls as in conventional method, and the time for this process will be shortened. 
5 To sum up, as an effect of the present invention, the labor and time required for the 
management of in compliance with the wishes of the individuals to which the data 
corresponds is reduced. 

Also, according to the present invention, the object has been achieved in a 
personal data management method comprising steps of: storing beforehand personal data 

10 records, each of which contains a unique identification code, in a database; establishing a 
communication connection; outputting a guidance message via the established 
communication connection for prompting the input of an identification code; receiving the 
identification code sent via the established communication connection; storing the 
received identification code into a reception code memory; and, outputting only the 

15 personal data records whose identification codes are not included in said reception code 
memory. 



BRIEF DESCRIPTION OF THE DRAWINGS 



20 Figure 1 is a block diagram to show a personal data management apparatus, an 

embodiment of the present invention. 

Figure 2 shows a table of examples of recorded guidance voice messages. 

Figure 3 is a flowchart to show the processes followed in a data management 
computer program. 

25 Figure 4 is a conceptual illustration to show the customer database file. 
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Figure 5 is an illustration to show the front face of an envelope for direct mail. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

5 The following embodiments do not restrict the interpretation of the claims 

relating to the present invention, and the combination of all the features explained in the 
embodiments is not always an indispensable means of solving the problem. 

In the following, preferred embodiment of the present invention will be explained 
in detail with reference to the drawings. 

10 Figure 1 is a block diagram to show a personal data management apparatus, an 

embodiment of the present invention; Figure 2 shows a table of examples of recorded 
guidance voice messages; Figure 3 is a flowchart to show the processes followed by a data 
management computer program; Figure 4 is a conceptual illustration to show the customer 
database file; and Figure 5 is a illustration to show the front face of an envelope for direct 

15 mail. 

The personal data management apparatus 1, which is an embodiment of the 
present invention, is implemented to provide a function for automated reception of Mail 
Preference Service (MPS), and contains a main control section 2 as shown in Figure 1. 
The main control section 2 is connected through a bus line to keyboard 3, a telephone set 5, 

20 program memory 6, an incoming call judgment section 7, a telephone set control section 9, 
a voice recorder 10, a voice recorder control section 11, an input judgment section 12, 
input signal memory 13, reception code memory 15, a code control judgment section 16, a 
database management section 17, customer database memory 19, a printer control section 
20, a printer 21, and so on, and a data management program PRO is stored in the program 

25 memory 6. 
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The voice recorder 10 uses publicly known technologies and comprises a 
guidance replaying apparatus and a message recording apparatus. The guidance replaying 
apparatus is capable of making a selection from guidance messages VI to V8 recorded 
and saved beforehand, replaying the selected message, and outputting it to the telephone 
5 set 5. The message recording apparatus is capable of recording a voice message from the 
other party of a phone call input through the telephone set 5. An operator of the voice 
recorder 10 can replay the message recorded by the message recording apparatus at any 
time. Figure 2 shows examples of the voice messages VI to V8 recorded and stored 
beforehand at the guidance replaying apparatus of the voice recorder 10. In Figure 2, 

10 each of voice numbers VI to V8 corresponds to a message. 

The customer database memory 19 contains a customer database file CDB such 
as shown in Figure 3. The customer database file CDB contains many customer data 
records CD. Each customer data record CD holds the personal data of a customer and 
includes the customer's telephone number, name, address, and the like. A code CN is a 

15 serial number like 001, 002, 003, and so on, and is attached to each customer data record 
CD, so that each customer data record can be identified by the code CN. Furthermore, it 
is possible for a customer data record to include such data items as shopping history or an 
income amount for example. The customer database memory 19 could be a built-in hard 
disk drive or a removable disk such as a floppy disk, a magnetic optical (MO) disk, or the 

20 like. 

The personal data management apparatus 1 is configured as described above, so 
this apparatus manages personal data records (customer data records CD) as follows. 
First, when the personal data management apparatus 1 is activated, the main control 
section 2 reads the data management program PRO from the program memory 6, and from 
25 this time on executes the processes shown in Figure 2 according to the data management 
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program PRO. That is to say, the main control section 2 makes the incoming call 
judgment section 7 judge whether there is an incoming call signal at the telephone set 5 
(step STP1 in figure 3). When a customer has received direct mail as shown in Figure 5 
and the customer wishes to delete his/her own personal record (customer data record) from 
5 the database for rejecting such direct mail, the customer dials up the phone number 67 of 
"DM Rejection Dial" printed on the envelope 65. This phone number 67 is the number 
for calling the telephone set 5 of the personal data management apparatus 1, but it is not 
required for the phone number 67 to be shown on the envelope 65. 

When an incoming call signal from the customer arrives at the telephone set 5, 
10 the incoming call judgment section 7 outputs judgment result to the telephone set 5. In 
response to the judgment result, the telephone set control section 9 establishes a 
connection. Simultaneously, in response to the judgment result from the incoming call 
judgment section 7, thus in response to the incoming call signal described above, the voice 
recorder control section 11 drives the voice recorder 10 to replay the guidance messages 
15 VI and V2 (refer to figure 2) stored in the voice recorder 10 and to send them out through 
the telephone set 5 (step STP2 in figure 3). The customer at the other end listens to the 
messages VI and V2 and inputs the code CN printed at the bottom of the mailing label 66 
(refer to figure 5) with push buttons and then pushes '#', which represents a terminating 
signal. This terminating signal is not necessarily '#', and may be ' * ' or the like. This 
20 mailing label 66 was printed out using the name, the address, and the code stored in the 
customer record CD in the customer database file CDB. The code CN at the bottom of 
the mailing label 66 identifies this record in the customer database file CDB. 

On the other hand, after the process of step STP2 shown in Figure 2 finishes, the 
input judgment section 12 continues to judge whether the terminating signal (the signal 
25 sent by the '#' button) is input by the other party through the telephone set 5 (step STP3 in 
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figure 3) while signals by the other party's input are passed from the telephone set 5 
through the telephone set control section 9 to be stored in the input signal memory 13. 
As described before, the customer at the other end pushes the buttons to input code CN 
and '#' at the end, so the code CN will be stored in the input signal memory 13 and the 
5 input judgment section detects the terminating signal from the other party. Based on this 
detection by the input judgment section 12, the voice recorder control section 11 drives the 
voice recorder 10 to replay the guidance messages V3 and V4 (refer to Figure 2) stored in 
the voice recorder 10 and to send them out through the telephone set 5 (step STP2 in 
Figure 4). Before the voice recorder control section outputs here the message V3, the 

10 voice recorder 11 reads the code CN that has been stored in the input signal memory 13, 
and inserts the code number CN as voice into the message V3. 

Then, the customer at the other end listens to the guidance messages V3 and V4, 
and confirms the number inserted in the message V3 from the code CN on the mailing 
label 66 of the direct mail (refer to Figure 5). If the number in the message V3 and the 

15 code CN on the mailing label 66 are identical, the customer inputs a confirmation signal 
by pushing the '#' button. This confirmation signal is not necessarily '#', and may be '*' 
or the like. By the way, the input judgment section 12 continues to judge whether the 
confirmation signal (the signal caused by '#') is input at the other end (step STP5 in 
Figure 3) after the process of step STP4 in Figure 3 finishes. So, when the customer 

20 pushes the '#' button, the input judgment section 12 detects the confirmation signal and 
the control proceeds to the next step, STP6. If the number in the message V3 is different 
from the code CN on the mailing label 66, the customer inputs the code CN again 
following the message V4. In this case, the input signal from the other end via the 
telephone set 5 is representing the code CN, which is not a confirmation signal (a signal 

25 caused by '#'), so the input judgment section 12 judges that there is no confirmation signal 
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at step STP5 in Figure 3 and the control will return to step STP3 again. Then, the input 
code CN and a following '#' are detected, which makes the control proceed to step STP3, 
then STP4, as described before. The steps STP3 to STP5 are repeated any number of 
times until the correct code CN is input and confirmed by the customer. Once the correct 
5 code CN is confirmed, the control will move to the next step, STP6. 

By the way, when the customer inputs a code CN to the personal data 
management apparatus 1, this code CN is stored in the reception code memory 15 at step 
STP7 as mentioned later. And the reception code memory 15 contains all the codes CN 
which the personal data management apparatus 1 has accepted up to the present moment. 

10 At step STP6, the code control judgment section 16 retrieves from the input signal 
memory 13 the code CN that was input right before the detection of the confirmation 
signal at step STP5, compares this code CN with all the codes CN stored in the reception 
code memory 15, and judges whether the code CN retrieved from the input signal memory 
13 has already been stored in the reception code memory 15. That is, the code control 

15 judgment section 16 judges whether the code CN retrieved from the input signal memory 
13 has already been accepted by the personal data management apparatus 1. 

At the step STP6 mentioned above, if the code CN retrieved from the input signal 
memory 13 turns out to be one of the codes already accepted, which means that the 
customer at the other end has already been registered at "DM Rejection Dial" but is trying 

20 again, the voice recorder control section 11 drives the voice recorder 10 to replay the 

guidance message V8 (refer to Figure 2) stored in the voice recorder 10 and to send it out 
through the telephone set 5, and the telephone set control section 9 disconnects the line for 
the telephone set 5 (step STP60 in Figure 3). In this case, because the customer's code 
CN has already been accepted and thus the customer data record CD with this code CN 

25 has already been deleted, it is not necessary to delete the customer data record CD. After 
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the process of step STP60, the control will be returned to the above-mentioned step STP1. 

At the step STP6, on the contrary, if the code CN retrieved from the input signal 
memory 13 turns out to be one that has not been accepted, which means that the customer 
at the other end is trying to register to "DM Rejection Dial" for the first time, the control 
5 proceeds to step STP7 in Figure 3. At the step STP7, the code control judgment section 
16 stores the code CN which was judged as a new one in the step STP6 to the reception 
code memory 15, the database management section 17 searches the customer database file 
CDB in the customer database memory 19 for the customer data record CD according to 
the code CN judged at step STP6 and deletes this customer data record CD, which 
10 contains the personal data of the customer at the other end of the line, and the voice 

recorder control section 11 drives the voice recorder 10 to replay the guidance message V5 
(refer to Figure 2) stored in the voice recorder 10 and to send it out through the telephone 
set 5. 

After the process of the step STP7 in Figure 3 finishes, the control proceeds to 
15 step STP8. At the step STP8, the voice recorder control section 11 drives the voice 
recorder 10 to replay the guidance message V6 (refer to Figure 2) stored in the voice 
recorder 10 and to send it out through the telephone set 5. And furthermore, the voice 
recorder control section 11 drives the voice recorder to output a tone signal through the 
telephone set 5, and turns on the recording apparatus of the voice recorder 10 (refer to 
20 message V6 shown in Figure 2). The customer listens to the message V6 and speaks 
following the message V6 while the recording apparatus of the voice recorder 10 records 
the message from the customer through the telephone set 5. After a prescribed length of 
recording time passes, the voice recorder control section 11 turns off the recording 
apparatus of the voice recorder 10 (the recording of the customer's message stops at this 
25 moment), and drives the voice recorder 10 to send the guidance message V7 out through 
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the telephone set 5. After the output of the message V7 finishes, the telephone set 
control section 9 disconnects the line for the telephone set 5. After the process of the 
step STP8, the control will be returned to the above-mentioned step STP1. The 
customer's message recorded by the recording apparatus of the voice recorder 10 can be 

5 replayed at any time by the manipulation of the operator. 

From this time on, when an incoming call from another customer arrives, the 
personal data management apparatus 1 deletes the customer data record CD from the 
customer database file CDB according to the customer's wish, by repeating the processes 
of the steps STP1 to STP8 (or STP60). And, after the maintenance process of the 

10 personal data is done, if an output list of the customer data records CD or mailing labels 
66 as shown in figure 5 for sending direct mail is required, the printer control section 20 
transmits the data of the customer database file CDB in the customer database memory 19 
to the printer 21 and makes the data print, according to a print command input from the 
keyboard 3. Because the customer data records CD of the customers who wish to delete 

15 their personal data have already been deleted, as described before, from the customer 

database file CDB, the printed output list or the mailing labels do not include the data of 
such customers. This means that this output list or these mailing labels can be used as 
they are for sending direct mail, and the customers who do not wish to receive direct mail 
do not receive direct mail or are not troubled. 

20 As described above, by using the personal data management apparatus 1 of this 

embodiment, receptionists do not have to handle telephone calls from customers who 
receive direct mail and wish to delete personal data, and operators need not search the 
database for a customer record and delete it manually for data maintenance purposes. 
That is, it is favorable that data management work such as the deletion of personal data 

25 can be done automatically and does not require labor or time. And, the personal data can 
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be managed so easily that dealers can promote privacy protection actively, and which is 
advantageous for dealers, not to mention customers, in terms of improvement of the image 
of the company, for example. And, as the privacy protection improves, the number of 
telephone complaints from the customers decreases dramatically, and it reduces the stress 
and fatigue of receptionists. Furthermore, because the customers can request the deletion 
of personal data by listening to the guidance message from the voice recorder 10 and by 
making inputs to the computer system without talking to operators, the procedure for the 
customers will be simpler and psychologically easier, and privacy protection will be 
further enhanced. 

Though the database management section 17 functions as a data processing 
section which executes the process of the deletion of the customer data record CD from 
the customer database file CDB based on the code CN sent from the customer at the other 
end in the embodiment described above, as another example, it is possible that the 
personal data management apparatus 1 includes a database filter processing section 30, 
which is connected to the main control section 2 as shown with a two-dot chain line in 
Figure 1, and that the data processing section comprises the reception code memory 15 
and the database filter processing section 30. In this case, the process of the deletion of 
the matched customer data record CD from the customer database file CDB in the 
customer database memory 19 is not executed at the step STP7 in Figure 3. Instead, 
when outputting the list of the customer data records CD for the purpose of sending direct 
mail, a print command input by an operator with the keyboard 3 makes the database filter 
processing section 30 read the customer database file CDB from the customer database 
memory 19 and read all the codes CN stored in the reception code memory 15. Then, the 
database process section 30 passes the customer database file CDB to the printer control 
section 20 while excluding the customer data records CD whose customer codes match the 
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codes CN read from the reception code memory 15. In this way, the customer database 
file CDB passed from the printer control section to the printer 21 for outputting does not 
include the customer data records with the codes CN that have been registered as 
rejections. In this case, the customers who do not wish to receive direct mail are not 
5 troubled, and besides, the customer database file CDB in the customer database memory 
19 is maintained untouched, which is favorable because the dealer does not have to lose 
any valuable information resources. 

Though the customer is connected to the personal data management apparatus by 
a telephone line in the embodiment described above, the communication circuit is not 

10 restricted to a telephone line and could be the Internet, a leased line, or the like. And, 
though examples of the guidance messages VI to V8 are shown in Figure 2, those 
messages are variable and are not restricted to the ones in Figure 2. Besides, the 
messages are not necessarily sent to the customers as voice messages, and could be 
character messages if the customer side has a display apparatus. And, the 

15 communication control means can comprise a modem (or a terminal adapter) and its 

control means (a driver) or the like for example, in addition to the telephone set 5 and the 
telephone set control section 9 in the above embodiment. Furthermore, the output means 
could be a floppy disk or a magnetic optical disk which the database file is written to, and 
the disk drive apparatus for them, besides the printer control section 20 and the printer 21 

20 in the above embodiment. And, though the management of the customer database for 
direct mailing is explained as an example in the above embodiment, the personal data 
management apparatus of the present invention could be applied to the data management 
of a large number of individuals for various purposes, an example of which is telephone 
marketing. 

25 As explained, in the present invention, the personal data management apparatus 
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manages multiple personal data using a database file (customer database file CDB) which 
contains multiple personal records (customer data records CD) including identification 
codes (code CN), and comprises a database file storage section (customer database 
memory 19) which is capable of containing the database file, a communication control 
5 section (telephone set 5 and telephone set control section 9) which transmits and receives 
signals via a communication circuit (telephone line 5a), a guidance message control 
section (voice recorder 10 and voice recorder control section 11) which stores multiple 
guidance messages (messages VI to V8), makes a selection from the stored multiple 
guidance messages in response to a signal received by the communication control section, 

10 and passes the selected message(s) as a signal for transmission to the communication 

control section; and, a data processing section (database management section 17, reception 
code memory 15, and database filter processing section 30) which executes prescribed 
processes, based on an identification code received as a signal from the communication 
control section. Such a configuration enables an individual, to whom the personal data 

15 corresponds, to perform the desired processes on the personal data corresponding to the 
individual in the database file by ringing up to access to the personal data management 
apparatus of the present invention via a communication circuit, and by sending an 
identification code and other information in response to guidance messages which are 
output selectively. Thus, the processing of the personal data can be done automatically in 

20 the personal data management apparatus by the manipulation by the individual, and this 

process does not require labor such as that by a receptionist to receive complaint telephone 
calls as in conventional way and the time required for this process is reduced. To sum up, 
as an effect of the present invention, the labor and time required for the management of 
the personal data in accordance with the wishes of people to whom the data corresponds. 

25 Further, in the present invention, the data processing section of the personal data 
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management apparatus deletes the personal data corresponding to the identification code 
received by the communication control section, from the database file stored in the 
database file storage section. In addition to the effect described above, such a 
configuration makes it possible to delete with certainty the personal data in order to 
5 comply with the corresponding individual's wish, and to thoroughly protect the 
individual's privacy. 

Further, in the present invention, the personal data management apparatus 
comprises an output section (printer control section 20 and printer 21) which is capable of 
outputting the database file processed by the data processing section in a mailing label 

10 format including the identification code of the personal data records. In addition to the 
effect described above, such a configuration makes it possible to send direct mail based on 
the output database file. And, it is favorable that direct mail is not sent to the individuals 
who do not wish to receive it because those individuals are excluded from the output 
database file which is processed by the data processing section. And, the personal data 

15 which is output in the mailing label format includes the identification codes, so that the 
mailing labels for direct mail mention the identification code. When an individual who 
has received direct mail wishes to process the corresponding personal data, manipulation 
is favorably easy and all that is needed for the individual is to access to the personal data 
management apparatus is to read the identification code on the label, and to input the code. 

20 Further, in the present invention, the data processing section of the personal data 

management apparatus includes an identification code storage section (reception code 
memory 15) which stores the identification code received by the communication control 
section and a transmission blocking section (database filter processing section 30) which 
prevents only the personal data records corresponding to the identification codes stored in 

25 the identification storage section from being transmitted to the output section. In 
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addition to the effects described above, with such a configuration, the processing of the 
database file is done when the database file is transmitted to the output section, which 
means it is possible to maintain the database file, stored in the database file storage section 
untouched, and it is possible to avoid losing valuable information resources. It is 
5 favorable to be able to make use of the database file in the database file storage section 
effectively at another opportunity. 

The processes described above may be performed by recording application 
programs for performing the processes, and loading and executing the programs on a 
computer system to control communication, send guidance messages, receive signals, and 

10 to process data based on the received signals. "Computer system", in this context, includes 
any OS (operating system) and peripheral hardware. 

Computer-readable recording media include portable media such as floppy disks, 
opto-magnetic disks, ROM, CD-ROMs, as well as fixed memory devices such as hard 
disks housed in computer systems. Further, computer-readable recording media include 

15 those that hold programs for a given length of time, such as volatile memories (RAM) 
contained internally in computers for servers and client computer systems used in 
transmitting application programs through networks such as the Internet or 
communication lines of telephone circuits. 

So far, various embodiments of the present invention have been described with 

20 reference to the diagrams, but the specific structures are not limited to those exemplified, 
and include designs that can be included within a range of the essence of the present 
invention. 



